It's normal behavior. Webserver listens on 80 (http) and 443 (https) ports, so your requests pass to webserver and it try to find corresponding vhost. You turned off ssl support for vhosts, so webserver could not find corresponding vhost and shows you default vhost. Why do you want to see 403...